Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/Vsp6JsUYEtOFQ_LVZJBct8tzizM.roa
File: Vsp6JsUYEtOFQ_LVZJBct8tzizM.roa (raw, json)
Hash identifier: jBz9Ur8S2XOj4Rx7b6rBTIXXcr6wF5310XTxFyw4KqQ=
Subject key identifier: 56:CA:7A:26:C5:18:12:D3:85:43:F2:D5:64:90:5C:B7:CB:73:8B:33
Certificate issuer: /CN=8eee7a3ad152bb8725a7db9bb7520804b6f1155f
Certificate serial: 01853EA8186461ABB9F9F3B8D1FCEA306C07
Authority key identifier: 8E:EE:7A:3A:D1:52:BB:87:25:A7:DB:9B:B7:52:08:04:B6:F1:15:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/Vsp6JsUYEtOFQ_LVZJBct8tzizM.roa
Signing time: Fri 23 Dec 2022 11:04:41 +0000
ROA not before: Fri 23 Dec 2022 11:04:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202499
IP address blocks: 185.228.240.0/24 maxlen: 24
185.228.241.0/24 maxlen: 24
185.228.242.0/24 maxlen: 24
185.71.168.0/22 maxlen: 22
185.239.64.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:3e:a8:18:64:61:ab:b9:f9:f3:b8:d1:fc:ea:30:6c:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eee7a3ad152bb8725a7db9bb7520804b6f1155f
Validity
Not Before: Dec 23 11:04:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=56ca7a26c51812d38543f2d564905cb7cb738b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e4:6b:d1:71:1b:1c:45:89:bd:13:ef:65:d0:
b3:be:9b:36:7d:97:77:29:f5:b8:e0:37:d4:26:e6:
80:0c:0f:d1:28:dd:3e:e2:ec:54:eb:3f:ca:f8:d2:
81:cb:7b:5f:2d:c7:6d:15:0f:7a:15:e0:57:5f:4e:
9f:49:ea:e9:64:d7:ac:e3:33:20:2a:3f:82:5b:a3:
9c:68:23:bc:3c:37:f2:eb:60:9a:cb:37:ef:71:f7:
8b:a4:f3:1c:74:9e:1a:39:9c:2a:1c:4e:03:5b:42:
00:38:a7:09:a3:7e:f9:df:12:43:a2:25:65:6c:61:
ed:9e:c9:92:a8:98:cc:24:28:de:28:ed:c7:6b:f7:
aa:34:75:4d:93:2a:04:6b:05:a0:4e:af:74:37:d7:
0c:fb:75:9f:f2:72:ca:1b:7b:50:d7:8b:33:88:40:
b0:c9:57:30:04:54:90:9d:29:ea:49:e9:10:21:bf:
8d:1e:d1:a3:a4:3e:e8:8b:04:ad:70:d9:c7:49:b2:
ec:69:8b:6e:00:cc:a1:46:56:63:01:98:24:36:ca:
9c:a7:26:aa:db:51:c7:11:19:bf:8b:8f:87:1c:0a:
ae:5f:91:0f:91:b3:32:4c:6c:47:62:7c:49:28:d5:
5a:1f:19:db:ce:59:12:86:47:69:8d:a3:45:ad:e9:
21:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:CA:7A:26:C5:18:12:D3:85:43:F2:D5:64:90:5C:B7:CB:73:8B:33
X509v3 Authority Key Identifier:
keyid:8E:EE:7A:3A:D1:52:BB:87:25:A7:DB:9B:B7:52:08:04:B6:F1:15:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/Vsp6JsUYEtOFQ_LVZJBct8tzizM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.71.168.0/22
185.228.240.0-185.228.242.255
185.239.64.0/22
Signature Algorithm: sha256WithRSAEncryption
78:69:2a:3b:04:00:78:19:2f:6c:5d:cc:2d:29:32:65:c1:ae:
0d:ef:1c:9f:7a:99:70:2e:f6:32:40:37:dd:1e:45:49:cd:dc:
b3:90:57:ed:31:ec:8a:62:27:43:cd:ba:d5:ff:e9:38:77:18:
fd:30:21:7a:33:a7:82:9c:10:a6:9c:b7:fd:be:83:8e:13:0f:
07:97:54:58:1c:34:ba:bc:05:04:79:85:10:12:44:ef:f1:1d:
cf:d7:3f:da:5b:b2:ed:9c:75:6e:2d:f9:a6:0b:5f:3c:87:57:
6a:bf:40:9e:e9:d3:8c:87:f1:0e:a6:77:7d:eb:01:54:57:8d:
04:e2:27:a7:43:e0:3e:5f:68:d2:96:61:57:a3:4e:a8:f1:4f:
8b:02:a5:ff:dc:b8:31:f4:7d:20:39:ad:31:86:da:47:f6:49:
3f:46:10:0b:d1:a3:e6:ad:db:c6:58:3f:ed:0e:fb:7e:fc:46:
b2:d9:1a:bb:33:f8:ad:66:ed:48:a6:c7:4c:75:b2:fa:f0:35:
44:8d:82:f1:3d:ea:f1:40:08:9b:cb:8c:ed:18:0d:ae:33:67:
c4:10:73:ad:ca:a2:08:8e:2b:27:10:93:0b:6c:7e:3e:35:44:
7d:0d:24:77:4d:f2:e7:5d:f6:9c:51:7e:6a:47:85:c8:aa:ac:
8d:4e:5d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:54 2024 by rpki-client on console-ams.rpki-client.org